]> git.ipfire.org Git - thirdparty/systemd.git/commit
resolve: query the parent zone for DS records
authorMaxHearnden <maxoscarhearnden@gmail.com>
Tue, 15 Apr 2025 00:16:48 +0000 (01:16 +0100)
committerYu Watanabe <watanabe.yu+github@gmail.com>
Wed, 16 Apr 2025 18:24:11 +0000 (03:24 +0900)
commit49ff90c70debc59f5a52e5cec5a92507d9868b9d
treea0a31154a3faf49206b5630696b0f46a26d9f575
parent76cb6f535e840d57d64b3baa5d4dcadd3d7843e8
resolve: query the parent zone for DS records

RFC 4035 Section 4.2 requires that missing DS records are queried for in
the parent zone rather than the child zone, the old behaviour could
cause subdomains under home.arpa (RFC 8375) to fail validation.

This commit assumes that QDCOUNT = 1 as per RFC 9619

Fixes https://github.com/systemd/systemd/issues/19496
src/resolve/resolved-dns-question.c
src/resolve/resolved-dns-question.h
src/resolve/resolved-dns-scope.c